Safety & Access Control Security patterns and best practices for Bankr API integrations. API Key Capability Flags Each API key has independent toggles managed at bankr.bot/api: | Flag | Controls | Default | |------|----------|---------| | | endpoints | false | | | LLM Gateway at | false | | | Restricts agent to read-only tools | false | Separate Agent & LLM Keys | Config | Agent API Key | LLM Gateway Key | |--------|--------------|-----------------| | Env var | | (falls back to API key) | | CLI config | | (falls back to ) | Read-Only Keys When : - works but only read tools are available - ret…